Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/9l91u0TlyTxCLjlVEfa2kePdhkQ.mft
File:                     9l91u0TlyTxCLjlVEfa2kePdhkQ.mft (raw, json)
Hash identifier:          Dfnea/agSvdsej21BCKysHNC8UHsyC03Q+ygZ9EjP80=
Subject key identifier:   F2:A6:4E:0A:AD:31:E4:97:A1:E4:6B:B8:C9:AF:C3:2C:0C:37:51:F8
Authority key identifier: F6:5F:75:BB:44:E5:C9:3C:42:2E:39:55:11:F6:B6:91:E3:DD:86:44
Certificate issuer:       /CN=f65f75bb44e5c93c422e395511f6b691e3dd8644
Certificate serial:       018D8DBE4C1E078960C8677AF268B7B6EBBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9l91u0TlyTxCLjlVEfa2kePdhkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/9l91u0TlyTxCLjlVEfa2kePdhkQ.mft
Manifest number:          083D
Signing time:             Fri 09 Feb 2024 12:01:15 +0000
Manifest this update:     Fri 09 Feb 2024 12:01:15 +0000
Manifest next update:     Sat 10 Feb 2024 12:01:15 +0000
Files and hashes:         1: 9l91u0TlyTxCLjlVEfa2kePdhkQ.crl (hash: mx7TvhQ4W7vKlHv5uN8yzCY8NevojBiiLmcXa7/v3r0=)
                          2: WL9XprFljF0Y-kVJv0BvX-3yqRs.roa (hash: qWHdurW8wszpQbbs9zrfW48XRw7Nq5KllIvOiUVlSMc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:8d:be:4c:1e:07:89:60:c8:67:7a:f2:68:b7:b6:eb:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65f75bb44e5c93c422e395511f6b691e3dd8644
        Validity
            Not Before: Feb  9 12:01:15 2024 GMT
            Not After : Feb 10 12:01:15 2024 GMT
        Subject: CN=f2a64e0aad31e497a1e46bb8c9afc32c0c3751f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e0:1e:22:71:0c:0e:ce:9c:b8:b8:ba:ad:e7:
                    0a:f5:3c:8c:b6:91:e6:a8:63:d2:df:87:71:83:a8:
                    e2:4f:cf:8e:15:36:d0:44:f2:6e:e5:1d:de:b1:c1:
                    c0:e5:b3:39:a1:0e:8f:bf:fc:9e:14:75:fb:e1:04:
                    70:a4:3b:c7:76:cf:d2:cb:84:55:a5:17:3c:9a:c0:
                    64:c0:d6:54:a4:8a:d6:94:e8:18:97:d0:19:82:83:
                    cd:ff:2e:43:7f:d0:30:f4:4d:9e:2b:ff:0d:fe:27:
                    28:03:6b:6c:1d:ce:f2:39:c7:70:d5:f1:ef:a4:fb:
                    82:10:81:83:b3:cb:8b:9d:db:ba:eb:84:a8:1a:c3:
                    71:d7:49:74:bd:29:7b:07:7f:cd:ef:3e:6b:00:c0:
                    96:c0:21:e4:b7:89:1b:02:fe:f2:30:01:f1:0f:36:
                    69:15:f1:3f:5d:20:1c:7e:35:ae:69:19:29:92:91:
                    4d:b1:67:d3:fa:1e:fb:09:fe:58:90:3c:61:6f:26:
                    85:15:c8:38:cf:53:03:50:df:bf:c2:40:df:b9:1e:
                    19:f8:4a:c7:28:16:b7:44:06:e2:e7:45:e1:aa:05:
                    22:fd:8a:6a:cc:b0:98:2c:7f:f9:3e:03:21:92:02:
                    aa:85:1a:50:da:20:67:03:d7:49:d3:71:c4:eb:93:
                    fa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A6:4E:0A:AD:31:E4:97:A1:E4:6B:B8:C9:AF:C3:2C:0C:37:51:F8
            X509v3 Authority Key Identifier:
                keyid:F6:5F:75:BB:44:E5:C9:3C:42:2E:39:55:11:F6:B6:91:E3:DD:86:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l91u0TlyTxCLjlVEfa2kePdhkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/9l91u0TlyTxCLjlVEfa2kePdhkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/9l91u0TlyTxCLjlVEfa2kePdhkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c8:71:00:d2:a6:79:92:d3:2e:4f:46:ee:87:56:75:74:72:
         3a:64:db:da:2e:7b:77:bf:e4:6d:70:70:c9:c5:5c:47:d5:0e:
         18:94:7e:0b:21:b9:10:fc:a8:0a:4b:c1:12:95:e6:9b:50:5b:
         d2:8f:8d:2f:2a:e3:69:20:04:90:44:70:fa:a5:70:93:d0:46:
         6b:cc:ed:5b:6e:68:3f:28:3d:3c:55:89:90:a8:47:34:de:e4:
         e7:50:78:85:56:7d:c9:04:b2:ee:d6:3d:fd:2f:16:56:9d:82:
         52:a2:fd:ba:4c:74:77:cb:25:24:d6:4e:72:45:62:47:86:da:
         2c:2b:92:a6:b4:de:21:96:ce:61:57:c7:65:bf:d1:16:16:29:
         43:b9:8f:7c:4b:44:0e:44:95:78:b0:84:f9:00:80:03:96:d9:
         53:4f:df:b2:77:5b:ca:a0:98:1f:1c:f8:b2:e2:44:6c:b8:0e:
         eb:1e:6a:0c:96:c2:01:78:e6:dc:59:42:f5:f4:81:66:eb:ad:
         a5:ac:28:c3:7a:ed:ca:43:40:e6:98:32:c4:06:a1:ed:6a:69:
         be:43:f4:12:b5:9e:64:10:07:d9:53:b1:4f:fc:ec:bf:e5:1e:
         48:62:81:26:e1:1e:de:0d:26:b0:5b:84:b2:23:81:d5:60:ef:
         d0:9a:02:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----